Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/sERIvqHcZj2yU32m6o5QSyQReME.roa
File: sERIvqHcZj2yU32m6o5QSyQReME.roa (raw, json)
Hash identifier: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=
Subject key identifier: B0:44:48:BE:A1:DC:66:3D:B2:53:7D:A6:EA:8E:50:4B:24:11:78:C1
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 01942067E55AFE2522AE21F0C9447F3B2E47
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/sERIvqHcZj2yU32m6o5QSyQReME.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206059
IP address blocks: 89.234.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e5:5a:fe:25:22:ae:21:f0:c9:44:7f:3b:2e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b04448bea1dc663db2537da6ea8e504b241178c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:94:0d:38:91:e0:9d:d9:1c:26:28:59:6b:
a3:0e:b1:9e:0b:1d:69:a0:fc:0a:bd:57:9b:10:dc:
13:5a:16:d6:2b:c8:74:da:e8:3e:85:7d:af:2d:fe:
31:94:87:9e:02:46:27:80:ab:31:fa:92:bf:12:28:
79:ea:75:09:3f:26:7f:27:e9:9a:31:fc:f6:d5:58:
28:27:44:4a:7b:bd:fd:19:ae:0f:f0:66:3f:fa:4e:
91:1d:de:e7:31:1b:ae:90:90:45:b5:53:50:5d:24:
8c:ed:0c:de:9a:7c:64:a3:61:42:29:5d:be:39:ea:
90:ce:5a:6a:54:6e:ac:74:e2:5e:cc:9e:60:61:aa:
b7:92:a7:f9:14:30:f1:6f:c7:1d:cc:ec:9d:18:00:
5f:dc:6f:cc:79:f2:b6:2d:28:c6:46:fd:75:1c:51:
49:35:9e:56:10:ae:2e:70:3e:d9:df:6c:b9:1c:3a:
f7:f3:ca:98:c9:b4:d0:09:e0:e9:61:73:6c:0d:43:
1e:2a:c0:ff:96:82:0f:ca:8a:3e:c3:ae:6e:93:ea:
88:66:62:5f:4e:b6:b6:59:3b:2b:4d:ba:1e:b5:b3:
ab:10:ec:74:a9:c1:36:88:db:94:1a:43:44:ec:09:
cd:8c:61:76:1c:2e:3d:84:c4:c9:5f:59:55:b0:df:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:44:48:BE:A1:DC:66:3D:B2:53:7D:A6:EA:8E:50:4B:24:11:78:C1
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/sERIvqHcZj2yU32m6o5QSyQReME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.188.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a1:f9:bb:8e:1e:1d:a7:fc:c1:e6:b7:e2:48:f7:f1:fa:47:
17:47:be:e7:b3:18:58:82:c4:f0:d0:65:39:ed:f2:d7:d8:1e:
56:b9:f5:f6:90:16:4c:3c:c0:1f:f4:84:a6:0a:75:a6:93:64:
d4:de:00:3d:ff:75:95:ef:ec:db:2a:20:2b:d8:cd:54:79:05:
f4:88:7b:90:bc:6f:44:8e:16:dd:be:2e:6c:0e:e2:fa:2a:95:
f4:34:e9:df:a9:d8:47:c3:06:a7:63:90:9b:f9:7d:18:89:22:
d1:32:9c:de:3e:66:bb:de:11:76:ca:d8:a3:92:55:a3:c3:58:
00:67:53:f3:7b:82:5a:b0:88:7f:77:bf:fe:24:6a:5a:c6:dc:
70:15:01:c3:d5:65:5f:b8:b1:f5:7a:ac:87:e4:3b:96:5d:67:
92:4c:1a:4e:e1:35:0e:d1:83:1c:93:16:6c:07:a8:e8:f7:25:
5b:6f:a6:c6:48:ce:db:b9:58:1e:2b:c1:4f:69:1f:63:f5:ad:
dc:62:e6:8a:8a:98:6c:98:cc:70:87:75:b3:25:92:f5:a4:51:
bf:fb:42:50:b6:ba:48:4a:f5:8b:41:e6:10:6a:f2:d0:08:ae:
a7:62:b7:7c:4f:24:70:4f:5e:3f:4b:69:38:d6:65:53:6b:f8:
15:51:9a:11
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQgZ+Va/iUiriHwyUR/Oy5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw
OGNkNGEwHhcNMjUwMTAxMDU0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDQ0NDhiZWExZGM2NjNkYjI1MzdkYTZlYThlNTA0YjI0MTE3OGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q6UDTiR4J3ZHCYoWWujDrGeCx1p
oPwKvVebENwTWhbWK8h02ug+hX2vLf4xlIeeAkYngKsx+pK/Eih56nUJPyZ/J+ma
Mfz21VgoJ0RKe739Ga4P8GY/+k6RHd7nMRuukJBFtVNQXSSM7Qzemnxko2FCKV2+
OeqQzlpqVG6sdOJezJ5gYaq3kqf5FDDxb8cdzOydGABf3G/MefK2LSjGRv11HFFJ
NZ5WEK4ucD7Z32y5HDr388qYybTQCeDpYXNsDUMeKsD/loIPyoo+w65uk+qIZmJf
Tra2WTsrTboetbOrEOx0qcE2iNuUGkNE7AnNjGF2HC49hMTJX1lVsN+umQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLBESL6h3GY9slN9puqOUEskEXjBMB8GA1UdIwQY
MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm
LTk2NWQ2ZDYwM2JmYS8xL3NFUkl2cUhjWmoyeVUzMm02bzVRU3lRUmVNRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNmLTk2NWQ2ZDYwM2Jm
YS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZ6rww
DQYJKoZIhvcNAQELBQADggEBAFmh+buOHh2n/MHmt+JI9/H6RxdHvuezGFiCxPDQ
ZTnt8tfYHla59faQFkw8wB/0hKYKdaaTZNTeAD3/dZXv7NsqICvYzVR5BfSIe5C8
b0SOFt2+LmwO4voqlfQ06d+p2EfDBqdjkJv5fRiJItEynN4+ZrveEXbK2KOSVaPD
WABnU/N7glqwiH93v/4kalrG3HAVAcPVZV+4sfV6rIfkO5ZdZ5JMGk7hNQ7RgxyT
FmwHqOj3JVtvpsZIztu5WB4rwU9pH2P1rdxi5oqKmGyYzHCHdbMlkvWkUb/7QlC2
ukhK9YtB5hBq8tAIrqdit3xPJHBPXj9LaTjWZVNr+BVRmhE=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net